Orca G2
Monthly
Local privilege escalation and unauthorized raw-disk access in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22) arise because the SYSTEM-level regService applies a security descriptor with no explicit DACL to a device object, letting a low-privileged local user open the object and issue raw disk operations that can disrupt the system, expose sensitive data, or elevate privileges. Exploitation is local-only (AV:L, PR:L, UI:N, 7.8) and publicly available exploit code exists (a PoC gist is linked from NVD), though the product's narrow maritime-navigation deployment base limits broad exposure and no active exploitation is confirmed (no CISA KEV listing).
Local privilege escalation and unauthorized raw-disk access in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22) arise because the SYSTEM-level regService applies a security descriptor with no explicit DACL to a device object, letting a low-privileged local user open the object and issue raw disk operations that can disrupt the system, expose sensitive data, or elevate privileges. Exploitation is local-only (AV:L, PR:L, UI:N, 7.8) and publicly available exploit code exists (a PoC gist is linked from NVD), though the product's narrow maritime-navigation deployment base limits broad exposure and no active exploitation is confirmed (no CISA KEV listing).